Remote SOC Threat Hunter and Incident Response Analyst

First Quality; Pennsylvania; On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Competitive base salary

Discretionary annual bonus

Benefits package starting day one

Job summary

First Quality is seeking a Cyber Security Analyst to join its remote Information Security team. The role focuses on incident detection, investigation, and response, with emphasis on tuning detection rules and automation to strengthen our security posture.

You will participate in threat hunting, review threat intelligence, and contribute to Red/Purple team exercises, reporting findings to stakeholders and senior management. A background in SOC operations is preferred.

Qualifications

• 1–2 years in a Security Operations Center (SOC) environment.
• Bachelor’s degree in Computer Security, Cybersecurity, Information Security, or related field preferred.
• Experience with advanced SIEM content development, dashboards, and reporting preferred.

Responsibilities

• Incident Detection and Response – monitor alerts from SIEM/SOAR, investigate incidents, contain and eradicate.
• Tuning & Optimization – refine detection rules and SOC processes to reduce false positives.
• Research & Development – develop new detection rules against emerging threats.
• Threat Hunting – proactively find hidden threats by log analysis and gaps in tools.
• Threat Intelligence – review feeds to strengthen defenses.
• Automation Development – design/maintain automation to streamline SOC workflows.
• Reporting – prepare reports on SOC activities, metrics and trends.
• Penetration Testing Exercises – participate in Red/Purple team activities.

Skills

SIEM experience

EDR familiarity

Log analysis

Threat hunting

Incident response

Scripting (Python/PowerShell)

Cloud security

SOC operations

Threat intelligence

Education

Bachelor’s degree in Computer Security/InfoSec

Tools

CrowdStrike

SentinelOne

Microsoft Defender for Endpoint

Cortex XDR

Job description

First Quality is seeking a Cyber Security Analyst to join its remote Information Security team. The role focuses on incident detection, investigation, and response, with emphasis on tuning detection rules and automation to strengthen our security posture.

You will participate in threat hunting, review threat intelligence, and contribute to Red/Purple team exercises, reporting findings to stakeholders and senior management. A background in SOC operations is preferred.